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(97) Abstract 



«I?**^,PIf**"' invention relates to a fail-safe non-volatile memory programming system. The system uses a high voltage chaining 
V2!^L)r\?i,^'^^\'^^'^ programming a niemoiy device. A secxmd charging capacitor (30) is used for supplying power to the 
control logic (26) used for programming the memory device. If power is removed during a programming cycle, the charge stored In the 
two capacitors Is sufficient to complete the programming cycle. -e / • ^u^ep swrea m uxo 
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vatia safe nom-voiatxle hekory programkxng system 

AND METHOD THEREFOR 

BACKGROUHD OF THE INVENTION 

1. f t^^d tihft invention: 

This invention relates to memory integrated circuit (IC) 
chips and, more specifically^ to a system and a method for 
providing a fail safe non-volatile memory write to a memory IC 
chip. 

2. nqacrintinn of the Prior Art; 

In non-volatile memory, for example Electrical Erasable 
Programmable Read Only Memory (EEPROM) , an uncertainty is always 
created if a power failure occurs at the time of the actual 
recording of information into the memory « When power is applied 
again, it is normally not possible to tell if a specific write was 
100 percent completed or not at all attempted* Furthermore, a 
"soft write" may have occurred. A soft write is when an attempt is 
made to change the state of information in a cell of the memory but 
the attempt is not fully completed due to the untimely power 
failure or other type of interrupt. This could result in a cell 
that may switch values due to changes in time, temperature, 
voltage, or other types of variables* This creates a very 
undesirable situation since the information stored in memory is 
volatile (i»e« , the information stored in memory may change without 
notice) . 

The above problem is exacerbated by the standard 
procedure used for writing a binary value into a memory word. When 
writing a binary value into a memory word, all the bits in the word 
are written to a one **1" state. The bits that are not supposed to 
be in a one "1*' state are then changed to a zero *'0>' state. The 
above procedure may also function in an opposite manner wherein all 
the bits in the word are written to a zero "0" state and the bits 
that are not supposed to be in a zero "0^^ state are then changed to 
a one state. The standard procedure for writing a binary value 
into a word results in a two step write process with a finite time 
between the first write and the second write. Although the time 
frame between write steps may be short (i.e., a few milliseconds), 
any problem stopping the process between the two write stages will 
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result In a pezmanen-t loss of inf ormatilon since neither the new 
value nor the old value will be stored in the non-volatile memory. 
This can cause serious complications in applications involving the 
addition or the deduction o£ money, for example , in smart card 
applications « 

In order to avoid the writing of binary values into a 
memory word, an abacus structure was implemented. In the abacus 
structure, as twits get deducted the bits in one level of the 
abacus get erased one by one. This avoids the danger of a total 
lost word. At most, a specific bit may be written into "softly*', 
which is not a serious problem since only one bit (or token) is 
effected. However, when a full level is depleted, an arithmetic 
"borrow" or binary "carry" operation must be performed. This 
requires a bit on one level above to be deducted and a full level 
below restored. This again is a two phase operation resulting in 
a danger that money may be lost or gained in smart card 
applications • 

Therefore, a need existed to provide a fail safe non** 
volatile memory write system. The system must eliminate soft 
writes to the non-volatile memory and uncompleted writes with low 
integrity* TkB system must also eliminate the two phase write 
operation which may be interrupted between stages resulting in the 
loss of information. The system must have the ability to coipiete 
a write operation to the non-volatile memory even if power supplied 
to the non-volatile memory has been interrupted. Furthermore, in 
smart card and monetary value applications, security against the 
misuse of this system to prevent the unauthorized loading of money 
is required without requiring external actions to be implemented. 
Presently, a method to prevent the loss of information has been 
implemented using special bits that require actions external to the 
memory chip to be undertaken. 

SUmSARY OF THE INVENTION 

In accordance with one embodiment of the present 
Invention, it is an object of the present invention to provide a 
fail safe non-volatile memory write system. 

It is another object of the present invention to provide 
a fall safe non-volatile memory write system that eliminates soft 
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vri'tes t.o tlie non-volatile memory and uncompleted writes with low 
integrity. 

It is still anotheir object of the present Invention to 
provide a fail safe non-volatile memory write system that 
eliminates two phase write operations which may be interrupted 
between stages resulting in the loss of information. 

It is still another object of the present invention to 
provide a fail safe non-volatile memory write system that has the 
eU^ility to complete a write operation to the non-volatile memory 
even if external power to the non-volatile memory system has been 
interrupted . 

It is still another object of the present invention to 
provide a fail safe non-volatile memory write system that has the 
ability to complete a write operation to the non-volatile memory 
array that is more size efficient when compared to an abacus 
structure . 

It is still another object of the present Invention to 
complete a write operation to different words in the non-volatile 
memory in a write cycle needing only a single high voltage pulse. 

BRIEF DESCRIPTION OF THE FRBFERRED EMBODIMENTS 
In accordance with one embodiment of the present 
invention a fail safe non-volatile memory programming system is 
disclosed. The system is comprised of non-volatile memory means 
for storing information. First charging capacitor means are 
coupled to the non-volatile memory means and to high voltage supply 
or generation means for storing a charge and for supplying a 
programming voltage to the non-volatile memory means. High voltage 
generator means are coupled to the first charging capacitor means 
for charging the first charging capacitor means. Sensor means are 
coupled to the first charging capacitor means for monitoring the 
charge stored in the first charging capacitor means. Control means 
are used in the non-volatile memory system means for receiving an 
external signal to program the non-volatile memory means and for 
sending a signal to program a desired address location in the non- 
volatile memory means with information when the sensor means 
indicates that the charge stored in the first charging capacitor 
means has reached a threshold level, the threshold level Indicating 
a charge stored in the first capacitor means sufficient to program 
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the desired address location in the non-volatile neznory means even 
when an external power supply is removed from the non*volatile 
memory system means. Second charging capacitor means are coupled 
to the control means for providing an independent backup source of 
power to the control means should the normal power supply source be 
interrupted. Latching means are coupled to the control means for 
receiving the desired address location in the non-volatile memory 
means to be programmed and for transferring the information to the 
desired address location. 

In accordance with another embodiment of the present 
invention r a method of providing a fail safe non^volatile memory 
programming system is disclosed. The method is comprised of the 
steps of: providing non-volatile memory means for storing 
information; providing first charging capacitor means coupled to 
the non«-volatile memory means for storing a charge for supplying a 
programming voltage to the non-volatile memory means; providing 
high voltage generator means coupled to the first charging 
capacitor means for charging the first charging capacitor means; 
providing latching means coupled to the control means for receiving 
the desired address location in the non-volatile memory means to be 
programmed and for transferring the information to be programmed to 
the desired address location; providing sensor means coupled to the 
first charging capacitor means for monitoring the charge stored in 
the first charging capacitor means; providing control means coupled 
to the non-volatile memory means for receiving an external signal 
to program the non-volatile memory means and for sending a signal 
to program a desired address location in the non-volatile memory 
means with information only when the sensor means indicates that 
the charge stored in the first charging capacitor means has reached 
a threshold level « the threshold level indicating a charge stored 
in the first capacitor means sufficient to program the desired 
address location in the non— volatile memory means even when an 
external power supply is removed from the non-volatile memory 
system means ; and providing second charging capacitor means coupled 
to the control means for providing an independent backup source of 
power to the control means and to the latching means should the 
normal power supply source fail. 

In the embodiments described sd3ove, the non-volatile 
memory means can be an EEPROMr FRAH, or any other non -volatile 
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memory means requiring a voltage to be program. The two charging 
capacitors may be any type of formal on chip energy storage 
structure • 

The foregoing and other objects, features, and advantages 
of the invention will be apparent from the following, more 
particular, description of the preferred embodiments of the 
invention, as Illustrated in the accompanying drawings. 

BRIEF ISSCRIPTIOR OF THE DIAWZNGS 
Figure 1 is a simplified block diagram of a fail safe 

non-volatile memory programming system of the present invention. 

Figure 2 is a simplified block diagram of a non-volatile 

dual array memory device for use with the fail safe non-volatile 

memory programming system depicted in figure i. 

Figure 2B is a table showing the different programming 

voltages for writing to and erasing information in the non-volatile 

dual array memory device depicted in figure 2. 

DETAII2D DESCRXFTION OF THE PREFERRED EMBODIMENT 
Referring to figure 1, a fall safe non-volatile memory 
programming system 10 (hereinafter system 10) is shown. The system 
10 is comprised of a non-volatile memory device 12 . In one 
embodiment of the present invention, the non-volatile memory device 
12 is an Electrical Erasable Programmable Read only Memory 
(EEPROM) • However, it should be noted that the system 10 can be 
applied to other non-volatile memory structures. The non-volatile 
memory device 12 is used for storing binary information. The non- 
volatile memory device 12 uses a GRAY code counter 14 for storing 
the binary information. In the preferred embodiment of the present 
invention, a four bit GRAY code counter is used. The GRAY code 
counter 14 is a positional binary notatlonal counter in which any 
two numbers whose difference is one are represented by binary 
expressions that are the same except in one bit position. The GRAY 
code counter reduces the amount of space required in the non- 
volatile memory device 12 for storing an equivalent amount of 
information as compared to using an abacus scheme. However, the 
GRAY code counter still has most of the advantages of the abacus 
scheme since there is only a one bit change for consecutive 
numbers . 
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A high voliiage charging capacit;or 16 is coupled to the 
non-volat.lle xnesioxy device 12. The high voltage charging capacitor 
16 ia used for storing a charge that must be sufficient before the 
non-volatile memory 12 is to be programmed (i»e, write to or erase 
the non-volatile memory device 12) • The high voltage charging 
capacitor 16 is then used for supplying a programming voltage to 
the non-volatile memory device 12. 

A current limiting device 24 is coupled between the high 
voltage charging capacitor 16 and the non-volatile memory device 
12. The current limiting device is used for limiting the current 
used by the non-volatile memory device 12 during programming thus 
creating a controlled upward voltage slope. The current limiting 
device 24 may be a resistor measuring a few mega -ohms or a current 
source of some kind which supplies a current of the desired value* 
If a current source is used, the current source needs to be 
controlled from an external supply for its proper operation and 
will therefore not function properly if the external supply fails. 
The current source also must not consume too much energy from the 
low voltage charging capacitor 30. It is therefore necessary that 
a normally open switch needs to be coupled in parallel with the 
current source and that the switch be closed when the external 
power fails, resulting in a very fast transfer of energy. If the 
current source consumes too much energy, it will req[uire the low 
voltage charging capacitor 30 to be very large. 

The high voltage charging capacitor 16 is charged by a 
high voltage generator 18 through a diode device 20. In the 
preferred embodiment of the present invention ^ the high voltage 
generator 18 is a charge pump which generates a high voltage 
charge. The diode device 2 0 is used for limiting feedback to the 
high voltage generator 18 to prevent discharging of the high 
voltage charging capacitor 16 through that route. 

A high voltage sensing device 22 is coupled to the high 
voltage charging capacitor 16* The high voltage sensing device 22 
monitors the charge stored in the high voltage charging capacitor 
16 « When the high voltage sensing device 22 reaches a threshold 
level, the high voltage sensing device 22 sends a signal to a 
control unit 26 indicating that the high voltage charging capacitor 
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16 has a sufficient charge to program the non-volatile memory 
device 12. 

VftiBTx a program command is given to the non-volatile 
memory device 12 by an external device (like a pay telephone in the 
case of a prepaid chip phone card) , the sensing of a sufficient 
charge in the capacitor 16 defines a point of no return. if povrer 
fails in any way before this point, the whole programming process 
is abandon without any attempted write to the memory device 12. 
However, should a sufficient charge be detected, the card with a 
fail safe non-volatile memory programming system 10 can be removed 
and the write process would be completed successfully. 

In order to program the non-volatile memory device 12, a 
switch S3 must be closed by the control unit 26. The closing of 
the switch S3 also allows for the programming voltage from the high 
voltage capacitor 16 to be supplied to the non-volatile memory 
device 12. Xt should be noted that if the charge stored in the 
high voltage charging capacitor 16 is not sufficient to program the 
non-volatile memory device 12^ the programming sequence is never 
started by the control unit 26. The switches S2 and S3 are closed 
at the end of a programming cycle and at start-up to precondition 
the high voltage charging capacitor 16 « 

A switch SI is also provided in the system 10. The 
switch 31 is provided in order to isolate the high voltage sensing 
device 22 during programming of the non-volatile memory device 12 
in order to prevent energy loss. 

When the control unit 26 receives a signal at its 
programming input 26A, the control unit 26 sends a signal to a 
latching device 28. The address and data information is loaded 
into the latching device 28 at inputs 26A and 28B respectively, and 
the new data is transferred to the desired address in the non- 
volatile memory device 12. A signal will then be sent to an input 
26B of the control unit 26 indicating when the programming cycle is 
complete . 

The control unit 26 and the latching device 28 are 
powered by an analog voltage supply AV^^. in the preferred 
embodiment of the present invention, the analog voltage supply AV^^ 
provides a 5 volt charge. If the analog voltage supply AV^^ is 
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interrupted, a low voltage charging capacitor 30 is provided to 
supply the required power to the control unit 26 and the latching 
device 28 in order to complete the programming cycle. In another 
embodiment of the present invention, the high voltage charging 
capacitor 16 is also coupled to a latching device 28- The high 
voltage charging capacitor 16 thus is able to supply power to the 
latching device 28 so that the latching device 28 does not have to 
depend on the analog voltage source AV^^. In such an 
implementation, the high voltage charging capacitor 16 will 
normally be connected to an external voltage source Vj^p while the 
high voltage generator 18 is not functioning* 

In accordance with another embodiment of the present 
invention, the non-volatile memory device 12 is split into two 
separate arrays • Referring to figures 2 and 2B, a dual array non- 
volatile memory device 40 is shown. The dual array non-volatile 
memory device 40 is split into a left array 4 OA and a right array 
4 OB wherein one of the arrays will hold even addresses and the 
other array will hold odd addresses* Each of the arrays 40A and 
40B have a plurality of signal line pairs Vy^f/B^- The signal line 
pairs Vj.^f/BL allow both of the arrays 40A and 40B of the dual 
array non-volatile memory device 40 to be simultaneously 
progranoned. As can be seen from the table 50 shown in figure 2B, 
by changing the voltages on the signal line pairs Vj^^^/Bj^, one is 
able to write or erase information to each of the arrays 4 OA and 

40B. 

The dual array non-volatile memory device 40 enables an 
erase with carry or borrow application to be completed in a single 
programming cycle. This is important since a single programming 
charge is stored and once discharged it cemnot be guaranteed in all 
applications to be recharged to complete the operation. This is 
required when an abacus structure is used and a higher order bit is 
"erased^" before a lower order "row" can be replenished. 

While the invention has been particularly shown and 
described with reference to preferred embodiments thereof, it will 
be understood by those skilled in the art that the foregoing and 
other changes in form and details may be made therein without 
departing from the spirit and scope of the invention. 
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WHAT IS CIAIMED IS: 

1. A fall safe non-vola'tile memory programming system 
comprising. In combination: 

non-volatile memory means for storing information; 

first charging capacitor means coupled to said non- 
volatile memory means for storing a charge for supplying a 
programming voltage to said non-volatile memory means; 

control means coupled to said non-volatile memory means 
for reoeiving an external signal to program said non-volatile 
memory means and for sending a signal to program a desired address 
location in said non-volatile memory means with information when 
said charge stored in said first charging capacitor means is 
sufficient to program said desired address location in said non- 
volatile memory means with said information even when an external 
power supply is removed from said non-volatile memory means; and 

second charging capacitor means coupled to said control 
means for providing a source of power to said control means. 

2* A fail safe non-volatile memory programming system 
in accordance with Claim 1 further comprising sensor means coupled 
to said first charging capacitor means for monitoring said charge 
stored in said first charging capacitor means. 

3. A fall safe non-volatile memory programming system 
in accordance with Claim 1 further comprising high voltage 
generator means coupled to said first charging capacitor means for 
charging said first charging capacitor means. 

4 . A fail safe non-volatile memory programming system 
in accordance with Claim 1 further comprising latching means 
coupled to said control means for receiving said desired address 
location in said non-volatile memory means to be programmed and for 
transferring said information to said desired address location. 
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5. A fail safe non-volatile memory prograuuning syst:em 
in accordance with Claim 1 further comprising resistance means 
coupled to said non-volatile memory means and to said high voltage 
generator means for controlling a voltage slew rate to said non- 
volatile memory means* 

6. A fall safe non-volatile memory prograumning system 
in accordance with Claim 1 further comprising current source means 
coupled to said non-volatile memory means and to said high voltage 
generator means for controlling a voltage slew rate to said non- 
volatile memory means. 

7. A fail safe non-volatile memory programming system 
in accordance with Claim 1 further comprising; 

first switching means coupled to said first charging 
capacitor means and to said control means for providing said 
programming voltage from said high voltage capacitor means to said 
non-volatile memory means; and 

second switching means coupled to said first charging 
capacitor means and to said control means for discharging said high 
voltage capacitor means and said non-volatile memory means when a 
programming cycle to said non-volatile memory means is completed. 

8« A fail safe non-volatile memory programming system 
in accordance with Claim 6 further comprising isolation means 
coupled to a main internal power supply (AVq^) and to an external 
voltage source (Vqq) for preventing external influence on said main 
internal power supply (AVj^^) during a write cycle to said non- 
volatile memory means* 

9. A fail safe non-volatile memory programming system 
in accordance with Claim 1 further comprising diode means coupled 
to said high voltage generator means and to said first charging 
capacitor means for limiting feedbaclc to said high voltage 
generator means to prevent discharging of said first charging 
capacitor means. 
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10. A fail safe non^volatile memory programming system 
in accordance witih Claim 1 wherein eaid non-volatiile memory means 
is an Electrical Erasable Programmable Read Only Memory (EEPROH) • 

11. A fail safe non-volatile memory programming system 
in accordance with Claim 1 wherein said non-volatile memory means 
comprises a GRAY code counter implementation means for storing 
information • 

12. A fail safe non-volatile memory programming system 
in accordance with Claim 11 wherein said GRAY code counter 
implementation means is a four bit GRAY code counter. 

13 . A fail safe non-volatile memory programming system 
in accordance with Claim i wherein said non-volatile memory means 
comprises: 

a first array containing even addresses of said non- 
volatile memory means; and 

a second array containing odd addresses of said non- 
volatile memory means* 

14. A fail safe non-volatile memory programming system 
in accordance with Claim 13 wherein elements of both said first 
array and said second array of said non-volatile memory means are 
simultaneously programmed with information. 
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IS. A fall safe non-volatile memory programming system 
comprising, in combination: 

non-volatile memory means for storing information; 

fotar bit GRAY code counter implementation means for 
storing information in said non-volatile memory means; 

first charging capacitor means coupled to said non- 
volatile memory means for storing a charge for supplying a 
programming voltage to said non-volatile memory means; 

high voltage generator means coupled to said first 
charging capacitor means for charging said first charging capacitor 
means ; 

diode means coupled to said high voltage generator means 
and to said first charging capacitor means for limiting feedback to 
said high voltage generator means to prevent discharging of said 
first charging capacitor means; 

sensor means coupled to said first charging capacitor 
means for monitoring said charge stored in said first charging 
capacitor means; 

control means coupled to said non-volatile memory means 
for receiving an external signal to program said non-volatile 
memory means and for sending a signal to program a desired address 
location in said non-volatile memory means with Information when 
said sensor means indicates that said charge stored in said first 
charging capacitor means has reached a threshold level indicating 
that said charge stored in said first capacitor means is sufficient 
to program said desired address location in said non-volatile 
memory means with said information even when an external power 
supply is removed from said non-volatile memory means; 

current limiting means coupled to said non-volatile 
memory means and to said high voltage generator means for 
controlling a voltage slew rate to said non-volatile memory means; 

latching means coupled to said control means for 
receiving said desired address location in said non-volatile memory 
means to be programmed and for transferring said information to 
said desired address location; 
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second charging Gapacit:or means coupled -to said con^trol 
means for providing a source* of power 'to said control means and "to 
said la'tching means r 

first swit^ching means coupled to said first charging 
capacitor means and to said control means for providing said 
programming voltage from said first charging capacitor means to 
said non-volatile memory means? and 

second switching means coupled to said first charging 
capacitor means and to said control means for discharging said 
first charging capacitor means and said non-volatile memory means 
when a programming cycle to said non-volatile memory means is 
completed. 

16. A fail safe non-*volatile memory programming system 
in accordance with Claim 15 wherein said current limiting means is 
a resistor. 

17 . A fail safe non-volatile memory programming system 
in accordance with Claim 15 wherein said current limiting means is 
a current source. 

18. A fail safe non-volatile memory programming system 
in accordance with Claim 15 wherein said non-volatile memory means 
is an Electrical Erasable Programmable Read Only Memory (EEPROK) • 

19. A fail safe non-volatile memory programming system 
in accordance with Claim 15 wherein said non-volatile memory means 
comprises a first array containing even addresses of said non- 
volatile memory means and a second array containing odd addresses 
of said non«*volatile memory means wherein both of said first array 
and said second array of said non-volatile memory means are 
simultaneously programmed with information. 
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20. A metliod of providing a fail safe non-volatile 
memory programming system comprising the steps of: 

providing non-volatile memory means for storing 
information ; 

providing first charging capacitor means coupled to said 
non-volatile memory means for storing a charge for supplying a 
programming voltage to said non-volatile memory means; 

providing high voltage generator means coupled to said 
first charging capacitor means for charging said first charging 
capacitor means; 

providing sensor means coupled to said first charging 
capacitor means for monitoring said charge stored in said first 
charging capacitor means; 

providing control means coupled to said non-volatile 
memory means for receiving an external signal to program said non- 
volatile memory means and for sending a signal to program a desired 
address location in said non-volatile memory means with information 
when said sensor means indicates that said charge stored in said 
first charging capacitor means has reached a threshold level 
indicating that said charge stored in said first capacitor means is 
sufficient to program said desired address location in said non- 
volatile memory means with said information even when an external 
power supply is removed from said non-volatile memory means; 

providing latching means coupled to said control means 
for receiving said desired address location in said non-volatile 
memory means to be programmed and for transferring said information 
to said desired address location; and 

providing second charging capacitor means coupled to said 
control means for providing a source of power to said control means 
and to said latohing means. 
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21. The me^od of Claim 20 fuz±lier comprising the s-tepa 

of: 

providing currant limiting meand coupled to said non- 
volatile memory means and to said high voltage generator means for 
controlling a voltage slew rate to said non-volatile memory means; 

providing first switching means coupled to said first 
charging capacitor means and to said control means for providing 
said programming voltage from said first charging capacitor means 
to said non-volatile memory means; 

providing second switching means coupled to said first 
charging capacitor means and to said control means for discharging 
said first charging capacitor means and said non-volatile memory 
means when a programming cycle is completed to said non-volatile 
memory means; and 

providing diode means coupled to said high voltage 
generator meauis and to said first charging capacitor means for 
limiting feedback to said high voltage generator means to prevent 
discharging of said first charging capacitor means. 

22. The method of Claim 21 wherein said step of 
providing non-volatile memory means further comprises the step of 
providing four bit GRAY code counter implementation means for 
storing information in said non-volatile memory means. 

23. The method of Claim 22 wherein said step of 
providing non-volatile memory means further comprises the step of 
providing non-volatile memory means having a first array containing 
even addresses of said non-volatile memory means and a second array 
containing odd addresses of said non-volatile memory means wherein 
both said first array and said second array of said non-volatile 
memory means are simultaneously programmed with information. 
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AMENDED CLAIMS 

[received by the International Bureau on 19 August 1997 (19,08*97); 
original claims 1 and 5-23 replaced by 
amended claims 1 and 5-22 (11 pages)] 

!• A fail safe non-volatile memory programming system 
comprising, in combination: 

non-volatile memory means for storing information r 

first charging capacitor means coupled to said non- 
volatile memory means for storing a charge for supplying a 
progreumning voltage to said non- volatile memory means; 

control means coupled to said non-volatile memory means 
for receiving an external signal to program said non-volatile 
memory means and for sending a signal to program a desired 
address location in said non-volatile memory means with 
information when said control means monitors a signal that 
indicates that a value of said charge stored in said first 
charging capacitor means can comple-tely program said desired 
address location in said non-volatile memory means with said 
information even when an external power supply is removed from 
said non-^volatile memory means; and 

second charging capacitor means coupled to said control 
means for providing a source of power to said control means. 

2. A fail safe non-'volatile memory programming system 
in accordance with Claim 1 further comprising sensor means 
coupled to said first charging capacitor means for monitoring 
said charge stored in said first charging capacitor means. 
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3 . A fail safe non-volatile memory programming syst«n 
in accordance with Claim 1 further comprising high voltage 
generator means coupled to said first charging capacitor means 
for charging said first charging capacitor means* 

4 . A fail safe non-volatile memory programming system 
in accordance with Claim 1 further comprising latching means 
coupled to said control means for receiving said desired address 
location in said non-volatile memory means to be programmed and 
for transferring said Information to said desired address 
location. 

5 . A fail safe non-volatile memory programming system 
in accordance with Claim 1 further comprising resistance means 
coupled to said non-volatile memory means for controlling a 
voltage slew rate to said non-volatile memory means* 

6. A fail safe non-volatile memory programming system 
in accordance with Claim 1 further comprising current source 
means coupled to said non-volatile memory means for controlling 
a voltage slew rate to said non-volatile memory means. 
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7 • A fall safe non-vola^lle mamory prograioniing system 
In accordance vltJi Claim 1 further comprising: 

first switching means coupled to said first charging 
capacitor means and to said control means for providing said 
prograumning voltage from said first charging capacitor means to 
said non-*volatile memory means; and 

second switching means coupled to said first charging 
capacitor means and to said control means for discharging said 
first charging capacitor means and said non-volatile memory means 
when a programming cycle to said non'-volatile memory means is 
completed. 

8 • A fail safe non-volatile memory programming system 
in accordance with Claim 3 further comprising diode means coupled 
to said high voltage generator means and to said first charging 
capacitor means for limiting feedback to said high voltage 
generator means to prevent discharging of said first charging 
capacitor means. 

9. A fail safe non-volatile memory programming system 
in accordance with Claim l wherein said non-volatile memory means 
is an Electrical Erasable Programmable Read Only Memory (EEFROM) • 

10. A fail safe non-volatile memory programming system 
in accordance with Claim L wherein said non-volatile memory means 
comprises a GRAY code counter implementation means for storing 
information . 



16 

AMENDED SHEET (ARTICLE 19) 



wo 97/490a5 



PCT/U$97/0IS531 



11. A fail safe non-volatile memory programming system 
in accordance with Claim 10 wherein said GRAY code counter 
implementation means is a four bit GRAY code counter. 

12 • A fail safe non-volatile memory programming system 
in accordance with Claim 1 wherein said non-volatile memory means 
comprises: 

a first array containing even addresses of said non-* 
volatile memory means; and 

a second array containing odd addresses of said non- 
volatile memory means. 

13 . A fail safe non-volatile memory programming system 
in accordance with Claim 12 wherein elements of both said first 
array and said second array of said non-volatile memory means are 
simultaneously programmed with information. 
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14 . A fail safe non-volat:ile memory programming system 
comprising, in combination: 

non-*volat.ile memory means for storing information; 

four bit GRAY code counter implementation means for 
storing information in said non-volatile memory means i 

first charging capacitor means coupled to said non- 
volatile memory means for storing a charge for supplying a 
programming voltage to said nonvolatile memory means; 

high voltage generator means coupled to said first 
charging capacitor means for charging said first charging 
capacitor means; 

diode means coupled to said high voltage generator 
means and to said first charging capacitor means for limiting 
feedback to said high voltage generator means to prevent 
discharging of said first charging capacitor means; 

sensor means coupled to said first charging capacitor 
means for monitoring said charge stored in said first charging 
capacitor means; 

control means coupled to said non-volatile memory means 
for receiving an external signal to program said non-volatile 
memory means and for sending a signal to program a desired 
address location in said non-volatile memory means with 
information when said sensor means indicates that said charge 
stored in said first charging capacitor means has reached a 
threshold level indicating that said charge stored in said first 
capacitor means is sufficient to program said desired address 
location in said non-volatile memory means with said information 
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even when em extemaQ power supply is removed from said non- 
volat-ile memory means; 

current: limiting means coupled to said non-volatile 
m€UDory means and to said high voltage generator means for 
controlling a voltage slew rate to said non-volatile memory 
means 7 

latching means coupled to said control means for 
receiving said desired address location in said non-volatile 
memory means to be programmed and for transferring said 
information to said desired address location; 

second charging capacitor means coupled to said control 
means for providing a soiurce of power to said control means and 
to said latching means; 

first switching means coupled to said first charging 
capacitor means and to said control means for providing said 
prograsoming voltage from said first charging capacitor means to 
said non-volatile memory means; and 

second switching means coupled to said first charging 
capacitor means and to said control means for discharging said 
first charging capacitor means and said non-volatile memory means 
when a programming cycle to said non-volatile memory means is 
completed « 
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15 . A fall saf ^ non-volatile memory programming systiem 
in accordance with Claim 14 wherein said current limiting meaucie 
is a res is t or « 

16. A Call safe non-volatile memory programming system 
in accordance with Claim 14 wherein said current limiting means 
is a current source. 

17 - A fail safe non-volatile memory programming system 
in accordance with claim 16 wherein said non -volatile memory 
means is an Electrical Erasable Programmable Read Only Memory 
(EEPROH) . 

18. A fail safe non-volatile memory programming system 
in accordance with Claim 14 wherein said non-volatile memory 
means comprises a first array containing even addresses of said 
non-volatile memory means and a second array containing odd 
addresses of said nonvolatile memory means wherein both of said 
first array and said second array of said non-volatile memory 
means are simultaneously programmed with Information. 
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19. A meUiod of providing a fail safe non-volatile 
mesiory programming system comprising the steps of: 

providing non-volatile memory means for storing 
information; 

providing first charging capacitor means coupled to 
said non-volatile memory means for storing a charge for supplying 
a programming voltage to said non-volatile memory means; 

providing high voltage generator means coupled to said 
first charging capacitor means for charging said first charging 
capacitor means; 

providing sensor means coupled to said first charging 
capacitor means for monitoring said charge stored in said first 
charging capacitor means i 

providing control means coupled to said non-volatile 
memory means for receiving an external signal to program said 
non-volatile memory means and for sending a signal to program a 
desired address location in said non-volatile memory means with 
information when said sensor means indicates that said charge 
stored in said first charging capacitor meauis has reached a 
threshold level indicating that said charge stored in said first 
capacitor means is sufficient to program said desired address 
location in said non-volatile memory means with said information 
even when an external power supply is removed from said non- 
volatile memory means; 

providing latching means coupled to said control means 
for receiving said desired address location in said non-volatile 
memory means to be programmed and for transferring said 
information to said desired address location; and 
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providing second charging capaci'fcor Bieans coupled to 
said conteol means for providing a source of power to said 
control means and to said latching meauis. 
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20. The method of Claim 19 further comprising the 

steps of: 

providing current limiting means coupled to said non- 
volatile memory means and to said high voltage generator means 
for controlling a voltage slew rate to said non-volatile memory 
means ; 

providing first switching means coupled to said first 
charging capacitor means and to said control means for providing 
said programming voltage from said first charging capacitor means 
to said non-volatile memory means; 

providing second switching means coupled to said first 
charging capacitor means and to said control means for 
discharging said first charging capacitor means and said non- 
volatile memory means when a programming cycle is completed to 
said non-volatile memory means; and 

providing diode means coupled to said high voltage 
generator means and to said first charging capacitor means for 
limiting feedback to said high voltage generator means to prevent 
discharging of said first charging capacitor means. 

21. The method of Claim 20 wherein said step of 
providing non-volatile memory means further comprises the step 
of providing four bit GRAY code counter implementation means for 
storing information in said non-volatile memory means. 



25 



AMENDED SHEET (ARTICLE 19) 



wo 97/49085 PCT/US97/06S31 



22. The aettiod of Claim 21 wherein said sliep of 
providing non**vola^ile memory means further comprises the step 
of providing non-volatile memory means having a first array 
containing even addresses of said non-volatile memory means and 
a second array containing odd addresses of said non<-volatile 
memory means wherein both said first array and said second array 
of said non*-volatile memory means are simultaneously programmed 
with information. 
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